Hi, What is the best way to generate the keytab in Samba4 to squid and http? I've used these commands without success: $ samba-tool user add proxy-service $ samba-tool user setexpiry proxy-service -noexpiry $ samba-tool user add proxy-user $ samba-tool user setexpiry proxy-user -noexpiry $ samba-tool spn add http/proxy-user proxy.nisled.org $ samba-tool domain exportkeytab /etc/proxy.keytab --principal=http/ proxy.nisled.org I also used this command: $ Msktutil -c-b "CN = ??COMPUTERS"-s HTTP/proxy.nisled.org -h -k proxy.nisled.org proxy.keytab - computer-name proxy -upn HTTP/proxy-service.nisle.dorg --server pdc.nisled.org - verbose Can you help me generate this keytab? Clodonil
On 12/20/12, Clodonil Trigo <clodonil at nisled.org> wrote:> $ samba-tool user add proxy-user > $ samba-tool user setexpiry proxy-user -noexpiry > $ samba-tool spn add http/proxy-user proxy.nisled.orgFind the difference: samba-tool spn add http/proxy.nisled.org proxy-user> $ samba-tool domain exportkeytab /etc/proxy.keytab --principal=http/ > proxy.nisled.org
Hi Kleb Valoshka, thereby I did. $ samba-tool user add proxy-user $ samba-tool user setexpiry proxy-user -noexpiry $ samba-tool spn add http/proxy-user proxy.nisled.org $ samba-tool spn add http/proxy.nisled.org proxy-user does not work, Clodonil 2012/12/20 Hleb Valoshka <375gnu at gmail.com>> On 12/20/12, Clodonil Trigo <clodonil at nisled.org> wrote: > > $ samba-tool user add proxy-user > > $ samba-tool user setexpiry proxy-user -noexpiry > > $ samba-tool spn add http/proxy-user proxy.nisled.org > > Find the difference: > > samba-tool spn add http/proxy.nisled.org proxy-user > > > $ samba-tool domain exportkeytab /etc/proxy.keytab --principal=http/ > > proxy.nisled.org > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >